BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//PKI Consortium//Conference Agenda//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Post-Quantum Cryptography Conference
X-WR-TIMEZONE:Europe/Amsterdam
BEGIN:VEVENT
UID:agenda-8fcb1466-0cce-4b6f-b426-4ec6de44a924@ics.pkic.org
SEQUENCE:1
DTSTAMP:20261025T183315Z
DTSTART:20261202T130000Z
DTEND:20261202T132500Z
STATUS:CONFIRMED
SUMMARY:The Agentic Control Plane: Measuring Post-Quantum Readiness in MCP 
 and A2A
DESCRIPTION:AI Agents are now more widely used in production deployments\, 
 and they are no longer merely prototypes. Model Context Protocol (MCP) and 
 Agent-to-Agent (A2A) are emerging as the default protocols for how agents c
 ommunicate with tools\, data\, and each other.\n​\nThis talk analyzes the
  state of post-quantum readiness in the emerging agent ecosystem and shows 
 at which layers PQC actually matters. We scan a growing list of public MCP 
 and A2A endpoints identified through open registries\, GitHub\, and well-kn
 own endpoint probes to measure internet exposure\, authentication signals\,
  TLS posture\, mTLS detection\, and post-quantum key exchange. For A2A agen
 ts\, we also analyze whether Agent Cards are signed\, which JWS algorithms 
 are used\, and what that implies for future signature migration.\n​\nOur 
 findings show that some endpoints have started to negotiate hybrid PQC key 
 exchange\, while the certificate identity layer remains classical. Further\
 , we attempt to distinguish the CDN edge termination from the origin postur
 e because edge-only numbers overstate the readiness. Legacy TLS versions st
 ill appear on deployment infrastructure. The key exchange layer matters now
  because of the harvest-now-decrypt-later risk\, while the signature layer 
 matters for agent identity\, Agent Card provenance\, and long-lived signed 
 metadata. For publicly trusted WebPKI TLS certificates\, certificate-layer 
 PQC is not yet an option until the CA/B Forum finalizes PQC profiles and ro
 ot programs accept them\, but agents using Private PKI can begin piloting M
 L-DSA certificates.\n​\nBy the end of this presentation\, the participant
 s will have a practical checklist about how to assess post-quantum readines
 s of the agent infrastructure\, including what to inventory\, what to scan\
 , which post-quantum signals are relevant today\, certificate-layer changes
  to prepare for in the future\, and finally how to address crypto-agility f
 or your agent infrastructure.\n\nSpeakers: Bhushan Lokhande
LOCATION:Room E (10)
CATEGORIES:Room E (10)
URL:https://pkic.org/events/2026/pqc-conference-amsterdam-nl/agenda/
END:VEVENT
END:VCALENDAR
